| Index: third_party/WebKit/Source/wtf/PartitionAlloc.cpp
|
| diff --git a/third_party/WebKit/Source/wtf/PartitionAlloc.cpp b/third_party/WebKit/Source/wtf/PartitionAlloc.cpp
|
| index dfc45d2489cc5eba0ca8aa10c66bec269dc358eb..a26147abaf035551a78af3064065c91b2714d889 100644
|
| --- a/third_party/WebKit/Source/wtf/PartitionAlloc.cpp
|
| +++ b/third_party/WebKit/Source/wtf/PartitionAlloc.cpp
|
| @@ -954,7 +954,7 @@ void partitionFreeSlowPath(PartitionPage* page)
|
| ASSERT(page->numAllocatedSlots < 0);
|
| // A transition of numAllocatedSlots from 0 to -1 is not legal, and
|
| // likely indicates a double-free.
|
| - RELEASE_ASSERT_WITH_SECURITY_IMPLICATION(page->numAllocatedSlots != -1);
|
| + SECURITY_CHECK(page->numAllocatedSlots != -1);
|
| page->numAllocatedSlots = -page->numAllocatedSlots - 2;
|
| ASSERT(page->numAllocatedSlots == partitionBucketSlots(bucket) - 1);
|
| // Fully used page became partially used. It must be put back on the
|
|
|